Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress

Explore Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress vulnerabilities across all versions. Currently tracking 43 known vulnerabilities, including severity, impact, and patch status.

01234567891009.05.2014Today10.08.20156.1Email Subscribers & Newsletters < 2.9.1 - Cross-Site Scripting CVSS 6.1 · 10.08.201524.01.20187.5Email Subscribers & Newsletters <= 3.4.7 - Unauthenticated Subscriber Download CVSS 7.5 · 24.01.201828.05.20186.1Email Subscribers & Newsletters <= 3.4.12 - Cross-Site Scripting CVSS 6.1 · 28.05.201812.07.20196.1Email Subscribers & Newsletters <= 4.1.6 - Cross-Site Scripting CVSS 6.1 · 12.07.201922.07.20199.8Email Subscribers & Newsletters <= 4.1.7 - SQL Injection CVSS 9.8 · 22.07.201913.11.20195.4Email Subscribers & Newsletters <= 4.2.2 - Cross-Site Request Forgery on Settings CVSS 5.4 · 13.11.20198.3Email Subscribers & Newsletters < 4.3.1 - Unauthenticated Blind SQL Injection CVSS 8.3 · 13.11.20196.5Email Subscribers & Newsletters <= 4.2.2 - Unauthenticated Option Creation CVSS 6.5 · 13.11.20195.8Email Subscribers & Newsletters <= 4.2.2 - Unauthenticated File Download w/ Information Disclosure CVSS 5.8 · 13.11.20194.3Email Subscribers & Newsletters <= 4.2.2 - Missing Authorization to Test Email CVSS 4.3 · 13.11.20196.3Email Subscribers & Newsletters <= 4.2.2 - Missing Authorization CVSS 6.3 · 13.11.201913.07.20208.8Icegram Email Subscribers & Newsletters Plugin for WordPress <= 4.5.0 - Cross-Site Request Forgery CVSS 8.8 · 13.07.202016.07.20204.9Icegram Email Subscribers & Newsletters <= 4.5.0 - Authenticated SQL Injection CVSS 4.9 · 16.07.202009.09.20205.3Email Subscribers & Newsletters <= 4.5.5 - Unauthenticated Email Forgery CVSS 5.3 · 09.09.202011.02.20228.8Email Subscribers & Newsletters <= 5.3.1 - Authenticated (or Cross-Site Request Forgery) Blind SQL Injection CVSS 8.8 · 11.02.202221.11.20228.8Icegram Express <= 5.4.19 - Authenticated (Subscriber+) SQL Injection CVSS 8.8 · 21.11.202206.02.20236.5Icegram Express <= 5.5.2 - Unauthenticated CSV Injection CVSS 6.5 · 06.02.202311.10.20239.1Icegram Express <= 5.6.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read CVSS 9.1 · 11.10.202326.03.20246.1Email Subscribers & Newsletters <= 5.7.11 - Reflected Cross-Site Scripting via campaign_id CVSS 6.1 · 26.03.202405.04.20245.3Email Subscribers & Newsletters <= 5.7.13 - Missing Authorization CVSS 5.3 · 05.04.20244.4Icegram Express <= 5.7.14 - Authenticated (Administrator+) Cross-Site Scripting via CSV import CVSS 4.4 · 05.04.202415.04.20249.8Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection CVSS 9.8 · 15.04.202414.05.20248.8Email Subscribers by Icegram Express <= 5.7.19 - Missing Authorization in handle_ajax_request CVSS 8.8 · 14.05.202422.05.20244.3Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.17 - Missing Authorization CVSS 4.3 · 22.05.202404.06.20249.8Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash CVSS 9.8 · 04.06.202411.06.20248.8Icegram Express <= 5.7.22 - Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id] CVSS 8.8 · 11.06.202420.06.20249.8Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin CVSS 9.8 · 20.06.202401.07.20249.8Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubscribe CVSS 9.8 · 01.07.202416.07.20244.3Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.26 - Missing Authorization CVSS 4.3 · 16.07.202425.09.20244.3Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure CVSS 4.3 · 25.09.202401.10.20245.4Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Authenticated (Subscriber+) Arbitrary Shortcode Execution CVSS 5.4 · 01.10.202416.12.20244.9Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.43 - Authenticated (Admin+) SQL Injection CVSS 4.9 · 16.12.202423.12.20244.4Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 23.12.20244.4Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 - Authenticated (Admin+) Stored Cross-Site Scripting via Text Block CVSS 4.4 · 23.12.20244.4Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 - Authenticated (Admin+) Stored Cross-Site Scripting via Workflow Settings CVSS 4.4 · 23.12.20244.4Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 - Authenticated (Admin+) Stored Cross-Site Scripting via Form Settings CVSS 4.4 · 23.12.202427.03.20254.4Email Subscribers & Newsletters <= 5.7.51 - Authenticated (Administrator+) Stored Cross-Site Scripting CVSS 4.4 · 27.03.202503.04.20254.4Email Subscribers & Newsletters <= 5.7.49 - Authenticated (Administrator+) Stored Cross-Site Scripting CVSS 4.4 · 03.04.202508.11.20256.6Email Subscribers & Newsletters <= 5.9.10 - Authenticated (Administrator+) PHP Object Injection CVSS 6.6 · 08.11.202518.11.20255.3Email Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Mailing Queue Trigger CVSS 5.3 · 18.11.202511.12.20255.3Email Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Action Scheduler Task Execution CVSS 5.3 · 11.12.202503.03.20266.5Email Subscribers & Newsletters <= 5.9.16 - Authenticated (Administrator+) SQL Injection via 'workflow_ids' Parameter CVSS 6.5 · 03.03.202601.07.20264.3Email Subscribers & Newsletters <= 5.9.27 - Missing Authorization to Authenticated (Contributor+) Settings Modification via ig_es_handle_request AJAX Action CVSS 4.3 · 01.07.2026

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

43

Get automatic notifications for all Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress vulnerabilities before they are exploited.

Vulnerability Records

43 records
2026-07-01 17:17CVE-2026-11592
4.3
Medium
Dmitrii IgnatyevYes
2026-03-03 12:24CVE-2026-1651
6.5
Medium
Chiao-Lin Yu (Steven Meow)Yes
2025-12-11 21:13CVE-2025-12348
5.3
Medium
Adrian LukitaYes
2025-11-18 16:15CVE-2025-12349
5.3
Medium
Adrian LukitaYes
2025-11-08 00:00CVE-2025-66055
6.6
Medium
Ananda DhakalYes
2025-04-03 00:00CVE-2025-0671
4.4
Medium
Dmitrii IgnatyevYes
2025-03-27 00:00CVE-2024-11924
4.4
Medium
Dmitrii IgnatyevYes
2024-12-23 00:00CVE-2024-12566
4.4
Medium
Dmitrii IgnatyevYes
2024-12-23 00:00CVE-2024-11636
4.4
Medium
Dmitrii IgnatyevYes
2024-12-23 00:00CVE-2024-12568
4.4
Medium
Dmitrii IgnatyevYes
Showing 1–10 of 43 reports
Email Subscribers &amp; Newsletters &#8211; Email Marketing, Post Notifications &amp; Newsletter Plugin for WordPress banner
Latestv5.9.31

Email Subscribers &amp; Newsletters &#8211; Email Marketing, Post Notifications &amp; Newsletter Plugin for WordPress

Icegram

Author

Icegram

4.6(1,168)
92/100
Last Updated
2026-07-24 (6d ago)
Active Installs
50,000+
Downloads
12,858,237
Requires WP
3.9+
Requires PHP
7.0+
Tested up to
WP 7.0.2
Created
2014-05-09 (12y ago)

Icegram Express makes email marketing simple, effective, and fully WordPress native. This powerful email marketing plugin helps you grow your subscriber list using high converting opt-in forms, send beautiful newsletters, and automate follow-ups all without writing a single line of code. Built for bloggers, small businesses, and online stores, Icegram Express is an all-in-one solution to engage subscribers, increase conversions, and build long-term relationships directly from your WordPress dashboard. Grow your impact. Stop worrying about email 📬 Overview Collect leads, build your email list, send newsletters, post notifications, and automated emails all from your WordPress dashboard. Icegram Express is a powerful yet beginner-friendly WordPress email marketing and newsletter plugin designed for bloggers, businesses, and WooCommerce stores. It helps you grow subscribers, engage audiences, and convert visitors into loyal customers without recurring SaaS costs. With Icegram Express, you can: Create and embed high-converting subscription forms Automatically send new post notification emails Send newsletters and broadcast emails Automation for welcome emails, follow-ups, Birthday offers, and abandoned cart recovery Segment lists and target the right subscribers Easy drag and drop editor to design forms and email campaigns REST API and tools for developers It works seamlessly with popular themes, plugins, and SMTP / email service providers, making setup easy and reliable. Trusted by 100000+ users, Icegram Express is a pocket-friendly alternative to expensive tools like Mailchimp, without compromising on features or control. Icegram Express can be accessed in the following languages: Czech Dutch English (UK) English (US) German Hungarian Polish Russian Spanish (Mexico) Spanish (Spain) And Spanish (Venezuela) 💌 Why others love Icegram Express? “Better than Mailchimp – and way cheaper!” – brianharper “Grew my subscriber list by 20% in just a month!” – fedephyto “Worked where other plugins failed: easy setup and instant results (unlike those big shots!)” – laurendevine “Best customer support I’ve ever experienced – both on free and paid plans” – chaffeeb “Plugin with 50+ features & 5-minute setup!” – joanyedwards “Best plugin for post notifications and Newsletter broadcasting!” – Roopesh Jain Icegram Express earns praise for being a high-quality email marketing automation plugin, offering speed, ease of use, reliability, and excellent support. BTW, once people start using Icegram Express, they keep using it as they grow. Many users have been with us for over 9 years. Explore how Icegram Express compares with others like MailPoet and FluentCRM. 👉👉👉 Trusted by internet marketers and influencers worldwide. Also featured in reviews and expert videos. 👉 Grow and engage your email subscribers for FREE with Icegram Express Everything in this section is 100% free, forever. No trial, no credit card, no feature countdown. Lead generation & list building Smart opt-in forms: popup, inline, widget, shortcode, HTML Unlimited lists tailored to your goals GDPR ready: single/double opt-in, privacy checkbox Unlimited Import/export via CSV Campaigns & automation 🚀 Send newsletters, broadcasts, and auto post notification Unlimited campaigns with open, click, and unsubscribe tracking Auto-clean inactive subscribers (with engagement filters) Email design & builder Drag & drop builder + HTML editor Responsive, professional templates for updates, offers, etc. Personalization via dynamic content and shortcodes Delivery control & flexibility Use SMTP, Icegram Mailer, or any ESP (SendGrid, Amazon SES, etc.) Throttle delivery speed to match server capacity One click unsubscribe, compliant with Gmail, Yahoo & GDPR Integrations Works with form plugins like CF7, WPForms, Gravity Forms and more Native WordPress actions + WooCommerce-ready Auto-convert commenters, users, and customers to subscribers Reports & performance 📊 Campaign analytics: opens, clicks, unsubscribes Track growth and engagement Learn more on the Icegram Express features page. Everything above is free. Everything below is Icegram Express Pro — for when you’re ready to automate more and target smarter. 🔥 Icegram Express Pro – Advanced Email Marketing & Automation Unlock powerful automation, targeting, and integrations for smarter campaigns and better results. 🌟 Advanced automation & scheduling Autoresponders, sequences, welcome emails Smart scheduling: post digests, timezone-based send, smart send-time optimization WooCommerce triggers: cart recovery, order updates, promotions Audience management & compliance ✅ Email validation, CAPTCHA, spam scoring, blacklist support Unsubscribe tracking, engagement score, list cleanup Import WP users, WooCommerce customers, Mailchimp subscribers directly Convert commenters to subscribers automatically Premium design & personalization Pro templates with advanced styling tools Deep personalization via custom fields and dynamic content Spam scoring to boost inbox placement Analytics & insights Detailed campaign analytics & reporting Exportable reports for offline sharing Performance tracking for subscribers Integrations & dev tools 🛠️ REST API & Webhooks for external app workflows Supports CF7, WPForms, Member plugins, LMS (like LearnDash), WooCommerce ESP integrations: MailerSend, Mailgun, SendGrid, Sendinblue, Post SMTP Security & team controls Role-based access for team members Activity logs and audit trails Priority support for Pro users 🛍️ WooCommerce email marketing automation Icegram Express is a robust email marketing platform for WooCommerce. ➜ Send product promotions and offers (free) ➜ Segment WooCommerce buyers for better targeting (free) ➜ Send coupons and personalized deals (Pro) ➜ Recover abandoned carts automatically (Pro) ➜ Trigger emails on purchases, order changes, and more (Pro) ➜ Win-back campaigns for inactive customers (Pro) Grow your WooCommerce store with powerful marketing automation tools – convert more, drive repeat purchases, and increase LTV. ✨ How others use Icegram Express ➜ Bloggers & content creators: Engage readers with Email Newsletters, post notifications, and updates ➜ eCommerce sellers: Automate promotions, seasonal campaigns, cart recovery, upsells using WooCommerce email marketing ➜ Marketers & agencies: Run professional Email Campaigns, track results, and scale with workflow automations and segmentation 💯 100% worth it – I’ve tried a lot of different plugins for managing my subscriber list, but this one is by far the best. Great for professional bloggers! – rickvidallon See how others succeed — explore some case studies here. Frequently Asked Questions Q: Is Icegram Express suitable for beginners? A: Absolutely! With an intuitive setup and a drag-and-drop editor, even non-tech users can create professional campaigns in minutes. Q: Why should I choose Icegram Express, and not other email marketing solutions? A: If you want rock solid features, reliability and a product designed with your goals in mind, choose Icegram Express. If you want to spend a lot of money and confuse yourself – you can go with big name mail monkeys. Q: How does Icegram Express integrate with WooCommerce? A: It offers robust WooCommerce email marketing features, including automated order notifications, cart recovery, and personalized product promotions. Q: What’s the difference between the free and Pro versions? A: The free version provides complete email marketing essentials, while the Pro version unlocks advanced automation, dynamic content personalization, enhanced reporting, additional templates, and much more for power users. Other solutions from Icegram team Icegram Engage – popups, welcome bar, opt-ins, and lead generation plugin Icegram Mailer – reliable email delivery service for WordPress & WooCommerce Icegram Collect – best lead gen forms plugin on WordPress Post / Page Duplicate – instantly duplicate pages, posts, or custom content Switch User Login by Icegram – Easily switch between user accounts Icegram Cookie Manager – Manage cookie consent and compliance for GDPR and privacy laws Temporary Login Without Password – share magic login links that work without password – great for giving access to your site to support teams or developers Smart Manager – manage & bulk edit posts, users, WooCommerce products, orders & more.. Offermative – dynamic discount pricing, related product recommendations, upsells, and funnels for WooCommerce Putler – the best analytics for ecommerce – combines all your data in one place 💬 Need help? We’re just a click away! New? Follow our comprehensive installation guide Explore our documentation — your answer might already be there On a premium plan? You get priority support via email or Facebook. Know more about different types of email campaigns in this guide. Our blog has a lot of other useful guides too. Checkout: Icegram Express premium plans | Marketing Blog | Support Help Desk | Case studies Let’s socialize: Private Facebook Group | Facebook Page | Twitter Handle | YouTube channel

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C